Candidates & notes are live from git. Gate: QA → green-light → release, order-enforced. PII/high-risk releases (auto-detected) need a second-person green-light (author≠approver). Every action is written to an append-only audit trail in Atlas — your POPIA change record.